*.vinshop.vn
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 6b:10:2e:ec:b2:54:63:cd:ec:b3:e2:31 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.vinshop.vn
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 6b:10:2e:ec:b2:54:63:cd:ec:b3:e2:31Serial Number (int): 33134460459137575192366408241
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 52:06:9e:ba:41:db:c1:72:36:4d:20:ae:bc:9b:15:64:62:8f:89:14
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): bd:f8:ff:fd:f6:d6:4f:4e:ba:61:cd:01:45:2d:2f:72:2b:f4:bc:87
Fingerprint (sha256): 2d:be:52:e8:fb:35:92:eb:a2:fe:37:d3:0b:9b:a1:14:82:5d:98:1d:8e:f0:4a:79:a3:5f:59:ee:00:11:c3:70
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate *.vinshop.vn
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.vinshop.vn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.vinshop.vn
vinshop.vn
vinshop.vn
Other certificates including the domain name vinshop.vn
(limited to 100 certificates)
thele.vinshop.vn
dev-pass.cleared4.org
int.vinshop.vn
vinshop.vn
www.franzz.ch
int.vinshop.vn
iap.vinshop.vn
doitac-fb.vinshop.vn
www.nsemble.ai
thele.vinshop.vn
int.vinshop.vn
demo.textile.teamin.in
*.int.vinshop.vn
app.goodwealth.com
*.vinshop.vn
vinshop.vn
int.vinshop.vn
ncc.vinshop.vn
doitac.vinshop.vn
int.vinshop.vn
iap.vinshop.vn
thele.vinshop.vn
vanves-victor-hugo.corehab.fr
plumbagocreekfarm.com
iap.vinshop.vn
int.vinshop.vn
int.vinshop.vn
www.gloryth.com
iap.vinshop.vn
vinshop.vn
thele.vinshop.vn
plumbagocreekfarm.com
strongpigeon.dev
vinshop.vn
int.vinshop.vn
b2b.vinshop.vn
int.vinshop.vn
finhance.io
app.dutycast.com
thele.vinshop.vn
doitac.vinshop.vn
sp.vinshop.vn
ungvon.vinshop.vn
www.radioamator.testry.ro
int.vinshop.vn
www.investsimply.ca
app.instantcosmetics.com.au
iap.vinshop.vn
int.vinshop.vn
gracelandct.org
app.dutycast.com
raymondsu.dev
www.maiape.com
iap.vinshop.vn
roxy.joyridecity.bike
iap.vinshop.vn
int.vinshop.vn
ungvon.vinshop.vn
oneseal.vinshop.vn
fairylullaby.com.au
*.vinshop.vn
thele.vinshop.vn
sni.cloudflaressl.com
ungvon.vinshop.vn
ungvon.vinshop.vn
asiad.ocos.app
payrows.com
iap.vinshop.vn
thele.vinshop.vn
ungvon.vinshop.vn
ungvon.vinshop.vn
thele.vinshop.vn
www.radioamator.testry.ro
iap.vinshop.vn
brandlab.easysignage.app
tullolabs.com
procpro.com.br
admin.bestguest.cz
support.bebest.today
int.vinshop.vn
www.investsimply.ca
thele.vinshop.vn
demo.textile.teamin.in
cloud.wayout.app
int.vinshop.vn
blog.settlework.com
sistema.kinmaster.cl
www.radioamator.testry.ro
thele.vinshop.vn
www.derivative.dev
*.iap.vinshop.vn
int.vinshop.vn
links.pixelcut.app
500words.app
novina.tech
thele.vinshop.vn
www.ametrine24.com
vinshop.vn
thele.vinshop.vn
dev-weavetest.thelevel.ai
dev-pass.cleared4.org
int.vinshop.vn
vinshop.vn
www.franzz.ch
int.vinshop.vn
iap.vinshop.vn
doitac-fb.vinshop.vn
www.nsemble.ai
thele.vinshop.vn
int.vinshop.vn
demo.textile.teamin.in
*.int.vinshop.vn
app.goodwealth.com
*.vinshop.vn
vinshop.vn
int.vinshop.vn
ncc.vinshop.vn
doitac.vinshop.vn
int.vinshop.vn
iap.vinshop.vn
thele.vinshop.vn
vanves-victor-hugo.corehab.fr
plumbagocreekfarm.com
iap.vinshop.vn
int.vinshop.vn
int.vinshop.vn
www.gloryth.com
iap.vinshop.vn
vinshop.vn
thele.vinshop.vn
plumbagocreekfarm.com
strongpigeon.dev
vinshop.vn
int.vinshop.vn
b2b.vinshop.vn
int.vinshop.vn
finhance.io
app.dutycast.com
thele.vinshop.vn
doitac.vinshop.vn
sp.vinshop.vn
ungvon.vinshop.vn
www.radioamator.testry.ro
int.vinshop.vn
www.investsimply.ca
app.instantcosmetics.com.au
iap.vinshop.vn
int.vinshop.vn
gracelandct.org
app.dutycast.com
raymondsu.dev
www.maiape.com
iap.vinshop.vn
roxy.joyridecity.bike
iap.vinshop.vn
int.vinshop.vn
ungvon.vinshop.vn
oneseal.vinshop.vn
fairylullaby.com.au
*.vinshop.vn
thele.vinshop.vn
sni.cloudflaressl.com
ungvon.vinshop.vn
ungvon.vinshop.vn
asiad.ocos.app
payrows.com
iap.vinshop.vn
thele.vinshop.vn
ungvon.vinshop.vn
ungvon.vinshop.vn
thele.vinshop.vn
www.radioamator.testry.ro
iap.vinshop.vn
brandlab.easysignage.app
tullolabs.com
procpro.com.br
admin.bestguest.cz
support.bebest.today
int.vinshop.vn
www.investsimply.ca
thele.vinshop.vn
demo.textile.teamin.in
cloud.wayout.app
int.vinshop.vn
blog.settlework.com
sistema.kinmaster.cl
www.radioamator.testry.ro
thele.vinshop.vn
www.derivative.dev
*.iap.vinshop.vn
int.vinshop.vn
links.pixelcut.app
500words.app
novina.tech
thele.vinshop.vn
www.ametrine24.com
vinshop.vn
thele.vinshop.vn
dev-weavetest.thelevel.ai
Certificate
The complete raw certificate details for *.vinshop.vn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIMaxAu7LJUY83ss+IxMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTIyMDYyNzA3MTIwM1oXDTIzMDcy OTA3MTIwMlowFzEVMBMGA1UEAwwMKi52aW5zaG9wLnZuMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEA1n2EsxK4VKpOhgogZCG6P6NRsO6twGeK80qb+eWu WzXiN3YJWSQMBBOpzcpjTD65w3TxteTuYfzykZ24Vk2ppD868c8CWNCwiWIFeP1M 43N5VbyY1xvlroAZH2hUb5RpHQwB/ApV7llZTS0MbNhg0LKjNASgfe5zABQXIuPy Vw0LcH8IwoSmuVwPAnxIWL//P3HOByQXOGiAadjMtJLtV0ZoVRfDjOYlcDjo9bne Y2dekbdruiwB+xl1al8pVL80z3GTbL+Krbc2bRJ+xb9jcxKdckDhQqSjZx9QSUmf UV6Q85u2e0YNQfS4fhpeEoyyo0NLwXzaqP+oEgkyovOh0QIDAQABo4IDSzCCA0cw DgYDVR0PAQH/BAQDAgWgMIGKBggrBgEFBQcBAQR+MHwwQwYIKwYBBQUHMAKGN2h0 dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzYWxwaGFzaGEyZzJy MS5jcnQwNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9n c2FscGhhc2hhMmcyMFcGA1UdIARQME4wQgYKKwYBBAGgMgEKCjA0MDIGCCsGAQUF BwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZn gQwBAgEwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmds b2JhbHNpZ24uY29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMCMGA1UdEQQcMBqCDCou dmluc2hvcC52boIKdmluc2hvcC52bjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwHwYDVR0jBBgwFoAU9c3VPAhQ+WpPOreX2laD5mnSaPcwHQYDVR0OBBYE FFIGnrpB28FyNk0grrybFWRij4kUMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcA dgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYGkAMt8AAAEAwBH MEUCIQDEP/ZSIRfgEyfJVGeRwgivyb9o0SFGZCKzoKJgb+uaWgIgASnwVIL9u7eF EpfvvrpPkG5E8/sLqC7NzUw0PRQURpUAdgA1zxkbv7FsV78PrUxtQsu7ticgJlHq P+Eq76gDwzvWTAAAAYGkAMuCAAAEAwBHMEUCIQCP/DXaIXYVOpIiYbeKHPo7igCo +aPbwH/ipEdv0fHk1wIgUyjVAqNLZel0kjwGcgyQxSVfv00DDgtY1R/7zq4NSPoA dQCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYGkAMuVAAAEAwBG MEQCIGuLucVfW04C4eNOwZjKueyZ+CVFqVbFr/E1l43R/QReAiBXpNWJ5kpfYM2e l8fTvbaCrNgWKYO7uy/LIbDVvlXkkjANBgkqhkiG9w0BAQsFAAOCAQEAnxzuxnKg 97fexsPPyuubnYdR5ae5jQb3tWr1dnr9OpgaU+eceFCuunGPBPH/MVeqK10s+nOd VfO1GYiI6O+0HI9weyT9gHgQrJ/DhU68F00oN4Z3mGUvXHT2sQ6m0vCT9Y4Ejah8 xp0O2Ph7bl/d2UQ7QGGHFOhhyuipjEv9rdbVgSEcHtEW+CaDlQJTCviX8rlfIZL7 IroXCHc91Gbcou+uJL5amTNzzVHoSsIwz+vHX45q523VqF8zOsSBMQFbM1G0oqSk YJZfIkqFNr/GVtIeZM6UwgDpPfmegU6lxDbttjKooDBMFzdt3nvOl+ohBXlHOmPc 7h3PgzzANEn5EA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n2EsxK4VKpOhgogZCG6 P6NRsO6twGeK80qb+eWuWzXiN3YJWSQMBBOpzcpjTD65w3TxteTuYfzykZ24Vk2p pD868c8CWNCwiWIFeP1M43N5VbyY1xvlroAZH2hUb5RpHQwB/ApV7llZTS0MbNhg 0LKjNASgfe5zABQXIuPyVw0LcH8IwoSmuVwPAnxIWL//P3HOByQXOGiAadjMtJLt V0ZoVRfDjOYlcDjo9bneY2dekbdruiwB+xl1al8pVL80z3GTbL+Krbc2bRJ+xb9j cxKdckDhQqSjZx9QSUmfUV6Q85u2e0YNQfS4fhpeEoyyo0NLwXzaqP+oEgkyovOh 0QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 33134460459137575192366408241 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-27 07:12:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 07:12:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vinshop.vn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27076892671663219943791523140618029076648548430987948222111915092628994529540335655913204146773105332461354084624861625469345600083887050508923932876266657477201488682069548316448498415983848833581342741257192074789362093148876234216541380081355652362569841601211614013683231340279779128018851703958274029006902945793707036470133736509985299748922766350587386742926515634790651432112623912882056852048899105063957231341881495717285583652606879909533601107935988979675458904049779884091751975541054838128410483187834149570342858779547456688428167361414827969286416484929329949515380514563742965796481624956489983828433 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinshop.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinshop.vn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 52069eba41dbc172364d20aebc9b1564628f8914 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009f1ceec672a0f7b7dec6c3cfcaeb9b9d8751e5a7b98d06f7b56af5767afd3a981a53e79c7850aeba718f04f1ff3157aa2b5d2cfa739d55f3b5198888e8efb41c8f707b24fd807810ac9fc3854ebc174d2837867798652f5c74f6b10ea6d2f093f58e048da87cc69d0ed8f87b6e5fddd9443b40618714e861cae8a98c4bfdadd6d581211c1ed116f826839502530af897f2b95f2192fb22ba1708773dd466dca2efae24be5a993373cd51e84ac230cfebc75f8e6ae76dd5a85f333ac48131015b3351b4a2a4a460965f224a8536bfc656d21e64ce94c200e93df99e814ea5c436edb632a8a0304c17376dde7bce97ea210579473a63dcee1dcf833cc03449f910